News for hackers. Stuff that matters.

A comment on WebUSB API: draft spec to safely expose USB device services to the web. Parent comment

Re:WebUSB API: draft spec to safely expose USB device servic... by pdkl95 on Sunday April 10, 2016 @01:52PM (#11467325)
Do you really think attackers will respect that limitation after they overflow a buffer in the browser? You're only looking at how it's supposed to work. What matters is how it will be exploited.
[ Parent | on HN ]
Re:WebUSB API: draft spec to safely expose USB device servic... by icebraining on Sunday April 10, 2016 @02:47PM (#11467548)
With or without WebUSB, browsers can already talk to USB devices, and so if you can exploit the browser to run your own code, you can too.
[ Parent | on HN ]
Re:WebUSB API: draft spec to safely expose USB device servic... by pdkl95 on Sunday April 10, 2016 @04:07PM (#11467920)
Then show me the USB interface code in firefox. As far as I know, it doesn't exist.
[ Parent | on HN ]
Re:WebUSB API: draft spec to safely expose USB device servic... by icebraining on Sunday April 10, 2016 @05:31PM (#11468284)
It's in the Win32 DLLs that Firefox links against.
[ Parent | on HN ]